fix(url handler): escape html

monkeytypegame · May 4, 2024 · 856beb4 · 856beb4
1 parent 876f6c0
commit 856beb4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/frontend/src/ts/utils/url-handler.ts b/frontend/src/ts/utils/url-handler.ts
@@ -189,7 +189,7 @@ export function loadTestSettingsFromUrl(getOverride?: string): void {
   Object.keys(applied).forEach((setKey) => {
     const set = applied[setKey];
     if (set !== undefined) {
-      appliedString += `${setKey}${set ? ": " + set : ""}<br>`;
+      appliedString += `${setKey}${Misc.escapeHTML(set ? ": " + set : "")}<br>`;
     }
   });